# CVEs published 2010-06-22

16 CVEs were published on June 22, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1407](https://cve.now/CVE-2010-1407.md): WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method in certain situations (no CVSS)
- [CVE-2010-1632](https://cve.now/CVE-2010-1632.md): Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 (no CVSS, org.apache.axis2.wso2:axis2)
- [CVE-2010-1751](https://cve.now/CVE-2010-1751.md): Application Sandbox in Apple iOS before 4 on the iPhone and iPod touch does not prevent photo-library access, which might allow remote attac (no CVSS)
- [CVE-2010-1752](https://cve.now/CVE-2010-1752.md): Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2010-1753](https://cve.now/CVE-2010-1753.md): ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (m (no CVSS)
- [CVE-2010-1754](https://cve.now/CVE-2010-1754.md): Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent (no CVSS)
- [CVE-2010-1755](https://cve.now/CVE-2010-1755.md): Safari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept Cookies preference, which makes it easier f (no CVSS)
- [CVE-2010-1756](https://cve.now/CVE-2010-1756.md): The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, wh (no CVSS)
- [CVE-2010-1757](https://cve.now/CVE-2010-1757.md): WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAM (no CVSS)
- [CVE-2010-1775](https://cve.now/CVE-2010-1775.md): Race condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows physically proximate attackers to bypass intended (no CVSS)
- [CVE-2010-2431](https://cve.now/CVE-2010-2431.md): The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink atta (no CVSS)
- [CVE-2010-2432](https://cve.now/CVE-2010-2432.md): The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE\_GSSAPI is omitted, does not properly handle a dema (no CVSS)
- [CVE-2010-1637](https://cve.now/CVE-2010-1637.md): The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelM (no CVSS)
- [CVE-2010-1638](https://cve.now/CVE-2010-1638.md): The IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as a proxy to scan internal networks via a cra (no CVSS)
- [CVE-2010-2420](https://cve.now/CVE-2010-2420.md): Multiple unspecified vulnerabilities in Fenrir Inc. (no CVSS)
- [CVE-2010-2421](https://cve.now/CVE-2010-2421.md): Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to (1) "extremely severe," (2) "hi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.